(Gj+UdZddlmZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z ddlmZddlmZddlmZdd lmZmZejeZed Gd d ZeegefZe ddZded<edZhdZ dZ!dZ"dZ#dDdZ$dEdZ%dFdZ&dGd Z'dHd$Z(dId'Z)dId(Z*dJd+Z+dId,Z,dKd/Z-dLd1Z.dMdNd5Z/dOd6Z0dPd7Z1 dQdRdCZ2dS)SaPre-execution ACP edit approval helpers. This module is intentionally isolated from the generic tool registry. ACP binds an edit approval requester in a ContextVar for the duration of one ACP agent run; CLI, gateway, and other sessions leave it unset and therefore bypass this guard. ) annotationsN) TimeoutError) ContextVarToken) dataclass)count)Path)AnyCallableT)frozencFeZdZUdZded<ded<ded<ded<ded <d S) EditProposalz?A proposed single-file edit that can be shown to an ACP client.str tool_namepath str | Noneold_textnew_textdict[str, Any] argumentsN)__name__ __module__ __qualname____doc____annotations__?/home/rurouni/.hermes/hermes-agent/acp_adapter/edit_approval.pyrrsKIINNN IIIMMMrrACP_EDIT_APPROVAL_REQUESTER)defaultz(ContextVar[EditApprovalRequester | None]_EDIT_APPROVAL_REQUESTER>.env .env.local.env.productionid_rsa id_ed25519askworkspace_sessionsession requesterEditApprovalRequester | Nonereturnrc6t|S)z>>#D))H777888888888.D.D J J Y]]=% 0 011 //+Hk9e  T q  R"RD"R"RSSS  y//    r patch_body list[str]c g}tjd|tjD]@}|d}|r||Atjd|tjD]~}|d}|d}|r|||r|||S)Nz/^\*\*\*\s+(?:Update|Add|Delete)\s+File:\s*(.+)$r"z+^\*\*\*\s+Move\s+File:\s*(.+?)\s*->\s*(.+)$)refinditer MULTILINEgroupstripappend)r]pathsmatchrsrcdsts r_extract_v4a_patch_pathsrksE:  {{1~~##%%   LL   6    kk!nn""$$kk!nn""$$   LL      LL    Lrc |d}t|tr|stdt |}|stdt |dkr|dnd|}t |dkrt|dnd}td|||t|S)NrVzpatch content requiredz no file paths found in V4A patchr"rz, rM) r; isinstancerrNrklenjoinrGrrO)rr]rg proposal_pathrs r_proposal_for_patch_v4arqsw''J j# & &3j31222 $Z 0 0E =;<<< #E aE!HHTYYu5E5EM14Uq#E!H---dH  y//    rrEditProposal | Nonec|dkrt|S|dkr@|dd}|dkrt|S|dkrt|SdS)z:Return an edit proposal for supported file mutation calls.rLrVmoder>N)rPr;r\rq)rrrts rbuild_edit_proposalruspL  ' 222G}}VY// 9  .y99 9 7??*955 5 4rrXct|j}d|D}d|vsd|vrdSt|jt vS)Nc6h|]}|Sr)lower).0parts r z2_is_sensitive_auto_approve_path..s ...tzz||...rz.gitz.sshT)r rApartsnamerxSENSITIVE_AUTO_APPROVE_NAMES)rr|lowereds r_is_sensitive_auto_approve_pathrsi JJ ! ! # # )E.....G Fg--t ::? " "&B BBrproposalpolicycwdct|pt}|tkst|jrdSt |jd}|tkrdS|tkrt tj d} | |dS#t$rYnwxYw|r^t |d} | |dS#t$rYdSwxYwdS)zReturn whether an ACP edit proposal may bypass the prompt for this session. This is intentionally session-scoped and conservative: sensitive paths still ask even under autonomous policies. F)strictT)rAUTO_APPROVE_ASKrerrr rAresolveAUTO_APPROVE_SESSIONAUTO_APPROVE_WORKSPACEtempfile gettempdir relative_torN)rrrrtmp_rootroots rshould_auto_approve_editrsi++ , , 2 2 4 4F !!!%DX]%S%S!u    ) ) + + 3 35 3 A AD %%%t '''+--..66e6DD    X & & &4    D   99''))111??D   &&&t   uu  5s$C(( C54C50E EEct}|dS t||}nO#t$rB}td||t jdd|didcYd}~Sd}~wwxYw|dS t||}n4#t$r'}td|d}Yd}~nd}~wwxYw|rdSt jdd idS) zRun ACP edit approval if bound. Returns a JSON tool-error string when the edit must be blocked, otherwise ``None`` so dispatch can continue. Requester exceptions deny by default. Nz5Could not build ACP edit approval proposal for %s: %sr[z.Edit approval denied: could not prepare diff ()F) ensure_asciiz&ACP edit approval requester failed: %sz:Edit approval denied by ACP client; file was not modified.)r<ru ExceptionloggerwarningjsondumpsrX)rrr+rexcapproveds rmaybe_require_edit_approvalrs=,--Itr&y)<< rrrNPY[^___z7$[UX$[$[$[\kpqqqqqqqqqrt (++,, ?EEEt :w \]lq r r rrs2% A17A,&A1,A19B CB>>Cc ddl}dtt}||d|jdd||j|j|jg|j|j d S) z._requester's//////>>>>>>  * Z1133 +HfcBB KK LfV^Vcddd4  Z Z Z ITX YYYYY Z  |,\ Z Z Z  vM O O O -X66 $$!    *)  K     >5 }}W}55HHy)    MMOOO NNJC P P P55555 (It44 GY - - ; Dd33|C s)?A&A<;A<C((D39/D..D3)rrr-rXr)rrrrrrs````` r make_acp_edit_approval_requesterrsB) ) ) ) ) ) ) ) ) ) V r)r+r,r-r)r2rr-r3)r-r3)r-r,)rrr-r)rrr-r)r]rr-r^)rrrrr-rr)rrr-rXr:)rrrrrrr-rX)rrrrr-r)rr)rN) rr rrrrrrrrr-r)3r __future__rasynciorloggingrarconcurrent.futuresrr contextvarsrr dataclassesr itertoolsrpathlibr typingr r getLoggerrrrrXrr!rrr~rrrr1r6r8r<rGrPr\rkrqrurrrrrrrrrs#"""""  <<<<<<))))))))!!!!!!  8 $ $ $!,!56EOZ! FFF %(( a``, 3333 **** '''' ****;;;;     B0.    CCCCBssss>4GK 4444444r